Lattice-Based Cryptography for Quantum-Resistant IoT Security

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Classical asymmetric cryptosystems like RSA and ECC are vulnerable to quantum computer attacks, necessitating the development of new cryptographic solutions that resist such threats, particularly for secure communication protocols like TLS and IoT devices.

Innovation Solution

The implementation of lattice-based cryptosystems, such as LWE and RLWE, which utilize mathematical problems like finding short vectors in lattices to secure key exchange, encryption, and signature schemes, providing resistance to quantum computer attacks through cryptographic operations optimized for hardware efficiency and security.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If lattice-based cryptosystems are implemented, then security against quantum attacks is improved, but computational complexity increases

Engineering Contradiction:
Improvesecurity against quantum attacksVSAvoidcomputational complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent changes the mathematical foundation from classical discrete logarithm problems to lattice-based problems (Learning With Errors - LWE, Ring-Learning With Errors - RLWE). This parameter change in the cryptographic primitive enables quantum resistance while managing computational complexity through optimized lattice operations and parameter selection.

Inventive Principle:
Principle #35Parameter changes

Solution Approach 2:

The patent substitutes the mathematical mechanism from RSA/ECC (based on integer factorization and discrete logarithms) to lattice-based cryptography (based on hardness of lattice problems). This substitution replaces the vulnerable cryptographic mechanism with one that is resistant to quantum computer attacks.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

2Reliability

If lattice-based cryptosystems are implemented, then quantum resistance is improved, but processing time increases

Engineering Contradiction:
Improvequantum resistanceVSAvoidprocessing time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent applies different optimization strategies to different parts of the lattice-based cryptographic operations. For example, Ring-LWE exploits the algebraic structure of polynomial rings to optimize multiplication operations, while using number-theoretic transforms for efficient convolution. This localized optimization reduces processing time in critical paths.

Inventive Principle:
Principle #3Local quality

Solution Approach 2:

The patent employs dynamic parameter selection and adaptive optimization techniques where cryptographic parameters are chosen based on security requirements and performance constraints. The system can dynamically adjust between different lattice-based schemes (LWE, RLWE, Module-LWE) and their parameter sets to balance security and processing time.

Inventive Principle:
Principle #15Dynamics

3Reliability

If lattice-based cryptosystems are implemented, then security is improved, but energy consumption increases

Engineering Contradiction:
ImprovesecurityVSAvoidenergy consumption
Core Design Contradiction:
ReliabilityVSUse of energy by moving object

Solution Approach 1:

The patent extracts and separates the computationally intensive parts of lattice-based cryptography from resource-constrained devices. For example, heavy computations are performed during key generation or in cloud-based security modules, while embedded devices perform only lightweight verification operations. This extraction reduces energy consumption on battery-powered devices.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The patent segments the cryptographic protocol into multiple phases with different computational requirements. Key generation, which is energy-intensive, is separated from authentication and encryption operations. This segmentation allows resource-constrained devices to avoid performing the most energy-consuming operations locally.

Inventive Principle:
Principle #1Segmentation

Data Source

PatentUS11838431B2Cryptographic operation
Publication Date: 2023.12.05 INFINEON TECHNOLOGIES AG
  • US11838431B2 patent drawing
  • US11838431B2 patent drawing
  • US11838431B2 patent drawing

AI summary

A method is suggested for providing a response, wherein the method comprises: obtaining a challenge from a host, determining the response based on the challenge, determining an auxiliary value based on the response or the challenge, providing the auxiliary value to the host, obtaining a random value from the host, checking the validity of the challenge based on the random value, and providing the response to the host only if the challenge is valid. Also, corresponding methods running on the host and system are provided. Further, corresponding devices, hosts and systems are suggested.